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In The Claims : 

1 . (Currently Amended) A method, comprising the steps of: 

loading a code module into a memory space of a first domain, the code module 
including an instruction having a symbol reference; 

detennining if the symbol reference is to an external location outside of the 

memory space; 

generating a link stub for the symbol reference when the symbol reference is to an 
external location to access the external location; and 

redirecting the instruction to the link stub : and 

determining if the external location is within a second domain that is within a 

requesting attachment of the second domain to the first domain when the second 
domain is determined n ot to be within the protection view of the first domain: and 

attaching the second domain to the first domain using an attachment mechanism . 

2. (Original) The method of claim 1, wherein the link stub is part of a linking table entry 
corresponding to the symbol reference. 

3 . (Original) The method of claim 1 , wherein the link stub is a jump instruction to the 
external location. 

4. (Cancelled) 
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5. (Currently Amended) The method of claim 4 I, further comprising the steps of: 

determining whether the attachment request is permitted based on authorization 
information provided by the first domain; 

wherein attachment to the second domain is not permitted when the attachment 
request is not permitted. 

6. (Cancelled) 

7. (Cancelled) 

^ (Chmentl^ 

creating a task in a first domain, the task executing a number of instructions; 

executing a first jump instruction in the number of instructions that refers to a link, 
stub corresponding to an external location in a second domain; 

executing the link stub; 

comparing the external location to a task protection view: 
generating a processing exception when the external location is outside the task 
protection view: and 

executing an exception handling routine in response to the generation of the 
processing exception, the exception handling routine including. 

saving a pre-exception setting of the task protection view. 

altering the task protection view to include a protection view of the second 
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domain, and 

jumping to the external location . 

9. (Original) The method of claim 8, wherein the link stub is part of linking table entry 
corresponding to the external location. 

10. (Previously Amended) The method of claim 8, wherein the link stub includes a second 
jump instruction to the external location. 

11. (Cancelled) 



12. (Cancelled) 

13. (Currently Amended) The method of claim 4-2 &, wherein the task protection view is 
saved on a task protection switch stack. 

14. (Currently Amended) The method of claim 12 8, further comprising steps of: 

retrieving the pre-exception setting of the task protection view; 
restoring the task protection view using the pre-exception setting of the task 
protection view; 

returning to an a subsequent instruction to the first jump instruction in the number 

of instructions. 
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15. (Currently Amended) A computer system, comprising 

a system space having a number of memory locations; 

a number of protection domains, at least one of the number of protection domains 
owning a portion of the system spac e, wherein each of the number of protection domains 
includes a protection view defining a set of the number of protection domains to which 
unprotected access may be made . 

16. (Original) A computer system of claim 15, wherein the at least one of the number of 
protection domains includes at least one of 

a code module, 
linE~stub^and 
an entry point. 

17. (Original) The system of claim 16, wherein the link stub is part of a linking table entry in 
a linking table. 

1 8. (Original) The system of claim 16, wherein the entry point is represented in a symbol 
table. 

19. (Original) The system of claim 16, wherein at least one of the number of protection 
domains is a system protection domain that includes: 

at least one code module including executable code for operating system services; 
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and 

at least one system object owned by the system protection domain. 

20. (Original) The system of claim 19, wherein the system protection domain includes a 
protection domain list that includes entries for each of the number of protection domains. 

2 1 . (Original) The system of claim 1 9, wherein at least one of the number of protection 
domains is a first protection domain that includes: 

at least one code module including executable code for a first set of functions; and 
a number of link stubs; 

wherein at l^astone of the link stubs corresponds to a s^b^lTeferenced in the 
executable code for the first set of functions, and such at least one link stub includes executable 
code to direct execution to the executable code for operating system services. 

22. (Original) The system of claim 21, wherein the number of protection domains includes a 
second protection domain that includes: 

at least one code module including executable code for a second set of functions; 

and 

a number of entry points; 

wherein each of the entry points corresponds to a symbol in the executable code 
for the second set of functions, 
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23. (Original) The system of claim 22, wherein one of the link stubs of the first protection 
domain corresponds to one of the number of entry points in the second protection domain, and 
such link stub includes executable code to direct execution to the one of the number of entry 
points in the second protection domain. 

24. (Cancelled) 

25. (Currently Amended) The system of claim 24 15, wherein the protection view sets a 
memory range of allowable memory accesses, and wherein a memory fault is generated when 
memory access is attempted outside of the memory range. 

26. (Currently Amended) The system of claim 24 15, wherein the memory range is 
contiguous. 

27. (Original) The system of claim 25, further comprising an exception handling routine that 
is executed on the occurrence of the memory fault, the exception handling routine including a 
protection switch mechanism. 

28. - 34. (Cancelled) 
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